[Resolved] Nod32; Win32.Agent Infiltration x3

I don't see anything bad. Have you tried uninstalling FireFox and re-installing it?

Delete these files

c:\users\Dan\AppData\Local\Temp\CQXXVZ.exe
c:\users\Dan\AppData\Local\Temp\ADOK.exe
c:\users\Dan\AppData\Local\Temp\B.exe
c:\users\Dan\AppData\Local\Temp\HSPUUYZKD.exe
c:\users\Dan\AppData\Local\Temp\QRORZWSH.exe

I posted before I saw the last page. Delete these files and reboot.

Delete these files

c:\users\Dan\AppData\Local\Temp\CQXXVZ.exe
c:\users\Dan\AppData\Local\Temp\ADOK.exe
c:\users\Dan\AppData\Local\Temp\B.exe
c:\users\Dan\AppData\Local\Temp\HSPUUYZKD.exe
c:\users\Dan\AppData\Local\Temp\QRORZWSH.exe

Copy/paste the text in the Codebox below into notepad:

Here's how to do that:
Click Start > Run type Notepad click OK.
This will open an empty notepad file:

Take your mouse, and place your cursor at the beginning of the text in the box below, then click and hold the left mouse button, while pulling your mouse over the text. This should highlight the text. Now release the left mouse button. Now, with the cursor over the highlighted text, right click the mouse for options, and select 'copy'. Now over the empty Notepad box, right click your mouse again, and select 'paste' and you will have copied and pasted the text.

File::
c:\users\Dan\AppData\Local\Temp\CQXXVZ.exe
c:\users\Dan\AppData\Local\Temp\ADOK.exe
c:\users\Dan\AppData\Local\Temp\B.exe 
c:\users\Dan\AppData\Local\Temp\HSPUUYZKD.exe
c:\users\Dan\AppData\Local\Temp\QRORZWSH.exe

Save this file to your desktop, Save this as "CFScript"

Here's how to do that:
1.Click File;
2.Click Save As… Change the directory to your desktop;
3.Change the Save as type to "All Files";
4.Type in the file name: CFScript
5.Click Save …


[external image: Posted Image]

Drag CFScript.txt into ComboFix.exe

Also please describe how your computer behaves at the moment.

To empty the cache in firefox
1. click on tools > options
2. click on the Privacy button on the left side of the window
3. click the "Clear All" button to clear all cached items or select individual items to clear by clicking on individual "Clear" buttons (History, Saved Information, Saved Passwords, Download Manager History, Cookies, Cache)

Did you select to clear everything or did you select individual items?

I can only assume it's a FF issue.

Lets get rid of the stuff we removed and combofix.

The following will implement some cleanup procedures as well as reset System Restore points:

• Click START then RUN
• Now type ComboFix /Uninstall in the runbox and click OK. Note the space between the X and the U, it needs to be there.
  
  
  • [external image: Posted Image]

Everything looks good to me